cve/2021/CVE-2021-45960.md

CVE-2021-45960

Description

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).

POC

Reference

• https://bugzilla.mozilla.org/show_bug.cgi?id=1217609

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/NaInSec/CVE-PoC-in-GitHub
• https://github.com/SYRTI/POC_to_review
• https://github.com/Trinadh465/external_lib_AOSP10_r33_CVE-2021-45960_CVE-2021-46143-
• https://github.com/WhooAmii/POC_to_review
• https://github.com/fokypoky/places-list
• https://github.com/hshivhare67/external_expat_v2.2.6_CVE-2021-45960
• https://github.com/nanopathi/external_expat_AOSP10_r33_CVE-2021-45960
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/trhacknon/Pocingit
• https://github.com/zecool/cve